Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 28

Vulnerabilities 6

• Unscored —
  CVE-2020-29368

  An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write imp…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 28, 2020
• Unscored —
  CVE-2021-4197

  An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Mar 23, 2022
• Unscored —
  CVE-2021-4203

  A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 25, 2022
• Unscored —
  CVE-2022-1012

  A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table pe…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Aug 5, 2022
• Unscored —
  CVE-2022-1729

  A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  Sep 1, 2022
• Unscored —
  CVE-2022-32250 Public exploit

  net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespace…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Jun 2, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1903244
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2035652
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2036934
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2064604
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2086753
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2092427
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5633.json
• report
  https://access.redhat.com/security/cve/CVE-2020-29368
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-29368
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-29368
• report
  https://access.redhat.com/security/cve/CVE-2021-4197
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-4197
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-4197
• article
  https://lore.kernel.org/lkml/20211209214707.805617-1-tj@kernel.org/T/
• report
  https://access.redhat.com/security/cve/CVE-2021-4203
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-4203
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-4203
• article
  https://bugs.chromium.org/p/project-zero/issues/detail?id=2230&can=7&q=modified-after%3Atoday-30&sort=-modified&colspec=ID%20Type%20Status%20Priority%20Milestone%20Owner%20Summary%20Modified%20Cve&cells=tiles&redir=1
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=35306eb23814
• article
  https://lore.kernel.org/netdev/20210929225750.2548112-1-eric.dumazet@gmail.com/T/
• report
  https://access.redhat.com/security/cve/CVE-2022-1012
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-1012
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-1012
• article
  https://arxiv.org/abs/2209.12993
• article
  https://datatracker.ietf.org/doc/html/rfc6056#section-3.3.4
• article
  https://lore.kernel.org/lkml/20220428124001.7428-1-w@1wt.eu/
• article
  https://lwn.net/Articles/910435/
• report
  https://access.redhat.com/security/cve/CVE-2022-1729
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-1729
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-1729
• report
  https://access.redhat.com/security/cve/CVE-2022-32250
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-32250
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-32250
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/net/netfilter?id=520778042ccca019f3ffa136dd0ca565c486cedd
• article
  https://www.openwall.com/lists/oss-security/2022/05/31/1